Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/16ea372f-a467-3688-94c4-41a5be8f0ebc.roa
File:                     16ea372f-a467-3688-94c4-41a5be8f0ebc.roa (raw, json)
Hash identifier:          5U+thujRXgBjqKX2lG5Ypqtn+YndnG9/xyxB455r6jw=
Subject key identifier:   9A:14:CB:E9:2C:37:8D:C5:06:27:58:55:02:4A:3B:AE:1C:B7:0F:64
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584F4972D51BDA65ECAEAAFEFE40
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/16ea372f-a467-3688-94c4-41a5be8f0ebc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19165
IP address blocks:        2604:5500:f000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:d5:1b:da:65:ec:ae:aa:fe:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=64e8db4a-af95-4832-af93-9736b777be42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:39:c4:12:ea:8a:67:3b:b5:c1:03:d7:5f:b5:
                    fd:b7:af:0f:25:69:73:4e:84:54:eb:47:35:da:66:
                    d2:e4:ca:35:fa:ca:a9:d3:40:2b:7e:26:26:50:a9:
                    b4:43:a3:dd:af:9a:03:8c:85:5c:48:eb:41:f1:fd:
                    54:b9:91:7c:c0:d0:13:15:80:76:f3:c5:8a:f3:fc:
                    33:67:b2:5a:51:95:42:c5:37:f0:57:0c:ed:e6:40:
                    20:dc:5c:58:da:b7:12:ad:69:41:6c:9b:50:46:6e:
                    57:44:a1:72:06:97:c1:69:b2:75:f9:b3:a6:9d:19:
                    a7:f0:fa:10:02:25:a9:03:71:79:1b:91:46:52:65:
                    eb:c3:26:6c:09:15:c8:39:0b:cf:9d:70:ce:32:1b:
                    8b:b9:6a:ec:e8:4f:99:66:b5:54:e6:5e:cd:86:d7:
                    14:b6:a7:5f:3d:fc:33:fd:bb:cd:39:6a:6a:f7:f0:
                    51:62:83:2c:58:ed:55:a4:40:43:9e:82:74:48:03:
                    24:46:27:ff:76:ba:de:3e:04:f8:f2:b9:6e:45:ba:
                    c5:e3:dd:42:c7:8c:32:5d:b5:02:52:5b:21:df:24:
                    63:2d:4b:61:82:b5:3e:59:0a:3e:4a:d9:4e:7f:9e:
                    b9:88:48:25:64:fd:f2:77:ca:96:11:1b:66:71:f6:
                    fd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:14:CB:E9:2C:37:8D:C5:06:27:58:55:02:4A:3B:AE:1C:B7:0F:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/16ea372f-a467-3688-94c4-41a5be8f0ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5500:f000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:3e:2a:b4:f5:60:95:b9:07:57:88:25:97:51:3a:e2:4e:87:
         70:0c:fd:5b:9a:be:d4:3e:c8:82:82:8c:20:a6:e9:bd:ce:17:
         65:3f:a8:fb:8b:42:a4:6e:c5:53:1e:71:d6:a4:a8:c7:42:1f:
         e1:7a:9d:5a:73:21:cd:9c:7d:67:d5:8a:65:88:2d:b4:58:9e:
         ca:f9:05:82:df:a7:db:33:d6:79:b0:5e:cc:e5:c8:5c:bb:df:
         ab:3a:7f:ec:ff:4d:79:ad:c8:49:8e:47:cf:a4:d1:76:f3:ef:
         a3:31:39:1e:e4:3f:36:5b:8b:89:69:94:4a:d2:88:af:02:4e:
         f0:3d:f5:53:37:1d:05:f8:98:b2:3f:95:e4:a8:91:1f:12:34:
         3c:4c:1c:08:57:d3:bd:64:1c:20:94:89:0b:38:f0:5b:ec:f9:
         30:69:5c:a9:88:8e:52:f8:4c:c6:55:13:ad:42:d9:ce:ed:7b:
         3f:69:29:4a:40:91:9e:35:2d:03:24:75:1a:fc:14:08:0f:52:
         e1:ba:99:72:73:08:fc:ca:7a:e0:2d:fc:5b:85:39:03:76:a7:
         e6:0a:81:20:73:f7:50:48:63:7f:67:70:0f:ce:af:88:2b:fc:
         9f:50:7d:9a:1d:ae:18:d3:e2:e7:0e:2c:39:df:3b:76:70:01:
         e2:57:cb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:58:58 2026 by rpki-client